AMENDMENTS TO THE CLAIMS 

Claims Pending: 

• At time of the Action: Claims 1-63 

• Amended Claims: Claims 1,2,5, 6, 9, 10, 13, 14, 16, 22, 30-48, 50-54, 56, 58-63 

• Allowable Claims: Claims 4, 8, and 12 

• Cancelled Claims: Claims 3, 4, 7, 8, 11, and 12 

• After this Response: Claims 1, 2, 5, 6, 9, 10, and 13-63 

This listing of claims will replace all prior versions and listings, of claims in the application. 
1. (Currently Amended) A method comprising: 

determining at least one Squared Tate pairing for at least one hyperelliptic curve; and 

wherein determining the Squared Tate pairing further includes: 

forming a mathematical chain for m, wherein m is a positive integer and an m-torsion 

element D is fixed on Jacobian of the hyperelliptic curve C; 

wherein the mathematical chain includes a mathematical chain selected from a group 

of mathematical chains comprising an addition chain and an addition-subtraction chain; 

cryptographically processing selected information based on said the determined 

Squared Tate pairing; 

outputting validation of selected information based on the determined Squared Tate 

pairing: and 

determining a course of action in response to validation of selected information. 



LEE & HAYES, PU.C 

RESPONSE TO OFFICE ACTION DATED JANUARY 12, 2007 



3 of 20 



ATTORNEY DOCKET NO. MS1-1280US 
Serial No. 10/628,729 



2. (Currently Amended) The method as recited in Claim 1, wherein said the 
Squared Tate pairing is defined for at least one hyperelliptic curve C of genus g over a field 
K. 

3. -4. (Cancelled). 

5. (Currently Amended) A compute r - readable storage medium having 
computer-implementable instructions for causing at least one processing unit to perform acts 
comprising: 

calculating at least one Squared Tate pairing for at least one hyperelliptic curve; and 

wherein deter mi ning the Squared Tate pairing further includes: 

forming a mathematical chain for m, wherein m is a positive integer and an m-to rsion 

element D is fixed on Jacobian of the hyperelliptic curve C; 

wherein the mathematical chain includes a mathematical chain selected from a group 

of mathematical chains comprising an addition chain and an addition-subtraction chain: 

cryptographically processing selected information based on said the determined 

Squared Tate pairing; 

outputting validation of selected information based on the determined Squared Tate 
pairing; and 

determining a course of action in response to validation of selected information. 
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6. (Currently Amended) The compute r - readab lo storage m edium as recited in 
Claim 5, wherein said the Squared Tate pairing is defined for at least one hyperelliptic curve 
C of genus g over a field K. 

7. -8. (Cancelled). 

9. (Currently Amended) An apparatus comprising: 

memory configured to store information suitable for use with using a cryptographic 
process; 

logic operatively coupled to said the memory and configured to calculate at least one 
Squared Tate pairing for at least one hyperelliptic curve, and at least partially support 
cryptographic processing of selected stored information based on said- the determined 
Squared Tate pairing; 

wherein the logic is further configured to form a mathematical chain for m. wherein 
m is a positive integer and an m-torsion element D is fixed on Jacobian of the hyperelliptic 
curve C; 

wherein the mathematical chain includes a mathematical chain selected from a group 
of mathematical chains comprising an addition chain and an addition-subtraction chain: 

a display device coupled to the logic for outputting validation of selected 
information; and 

the logic determining a course of action in response to validation. 
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10. (Currently Amended) The apparatus as recited in Claim 9, wherein said the 
Squared Tate pairing is defined for at least one hyperelliptic curve C of genus g over a field 
K. 



11.-12. (Cancelled). 

1 3 . (Currently Amended) A method comprising: 

determining a hyperelliptic curve C of genus g over a field K and a positive integer 

m; 

determining a Jacobian J(Q of said the hyperelliptic curve C, and wherein each 
element D of J(Q contains a representative of the form A- g(Po), where A is an effective 
divisor of degree g; and 

determining a plurality of functions h jt o that are iterative building blocks for the 
formation of a function h m D in order to evaluate v„, which is a Squared Tate pairing; 

outputting validation of selected information based on the Squared Tate pairing; and 

determining a course of action in response to validation of selected information. 

14. (Currently Amended) The method as recited in Claim 13, wherein said the 
hyperelliptic curve C is over a field not of characteristic 2. 

1 5 . (Original) The method as recited in Claim 1 3 , wherein 

for at least one element D of J(Q, a representative for iD will be A x - g(Po), where A t 
is effective of degree g. 
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16. (Currently amended) The method as recited in Claim 13, wherein if P=(x, y) 
is a point on said die hyperelliptic curve C, then -P denotes a point -P:=(x, -y), and 
wherein if a point P=(x, y) occurs in A and y * 0, then -P := (jc,-?) does not occur in .4 and a 
representative for identity will be g(Po)- 

17. (Original) The method as recited in Claim 16, further comprising: 

to a representative A { , associating two polynomials (a h bi) which represent a divisor. 

18. (Original) The method as recited in Claim 1 6, further comprising: 
determining D as an w-torsion element of J(Q. 

19. (Original) The method as recited in Claim 1 8, further comprising: 

if j is an integer, then h JrD = hj^X) denoting a rational function on C with divisor 
(h MD )^jA l -Aj-({j-\)g)(P Q ). 

20. (Original) The method as recited in Claim 18, wherein D is an m-torsion 
divisor and A m = g(Po), and a divisor of h mJD is {h m D ) = mA\- mg(Po). 

2 1 (Original) The method as recited in Claim 1 8, wherein h miD is well-defined up 
to a multiplicative constant. 
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22. (Currently Amended) The method as recited in Claim 18, further comprising: 
evaluating h MfD at a degree zero divisor E on said the hyperelliptic curve C, wherein 

E does not contain Pq and E is prime to A t . 

23. (Original) The method as recited in Claim 1 8, wherein E is prime to Aj for all 
z in an addition-subtraction chain for m. 

24. (Original) The method as recited in Claim 22, wherein given A h A jt and A i+j , 
further comprising determining a function uq- such that a divisor of u,j is (ujj) = A t + Aj - A i+J 
~g(Po). 

25. (Original) The method as recited in Claim 22, further comprising: 
evaluating hj rD (E) such that when j~\ , h\,i> is 1 . 

26. (Original) The method as recited in Claim 22, further comprising: 

given A h A h h LJ ^E) and h lD (E), evaluating u,j to be (u^A,- + Aj - A i+J - g(Po\, and 
h i+J , D (E)= h iiD (E) hj- D (E) mj (£). 

27. (Original) The method as recited in Claim 1 3, further comprising; 
determining a function {mj) = At + Aj - A i+j - g{Po)- 

28. (Original) The method as recited in Claim 27, wherein g = 2 and 
= Aj + Aj - A i+ j - 2(P 0 ) is determined as follows 
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U U (*) := Z l t Jk ( v\ * d W® > if ^ de & ee of a new is 

greater than 2, otherwise, u u is determined as u t j (X) := d(x(X)), wherein d(x) is the 
greatest common divisor of three polynomials (a,{x), afa), bi(x)+bj(x)). 



29. (Original) The method as recited in Claim 13, further comprising: 
determining a Squared Tate pairing for a hyperelliptic curves v m , for an m-torsion 

element D of a Jacobian J(Q and an element E of J(Q, with representatives 
(P0+(P 2 )+...+(^) - g(Po) and (Qi)+(Q2)+.-+(Qg) ~ g(Po), respectively, with each P t and 
each Qj on the curve C, with P, not equal to ±Qj for all ij, determining that 

v m {D,E):= (^ D ((q)-(-q) + (^)-(-^) + ... + (^)-(^))^. 

30. (Currently Amended) A compute r readable storage medium having 
computer-implementable instructions for causing at least one processing unit to perform acts 
comprising: 

determining a hyperelliptic curve C of genus g over a field K and a positive integer 

m\ 

determining a Jacobian J(Q of said the hyperelliptic curve C, and wherein each 
element D of J(C) contains a representative of the form A- g(Po), where A is an effective 
divisor of degree g; and 

determining a plurality of functions h jD that are iterative building blocks for the 
formation of a function h m _ D in order to evaluate v m which is a Squared Tate pairing; 

outputting validation of selected information based on the Squared Tate pairing; and 
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determining a course of action in response to validation of selected information. 

31. (Currently Amended) The compute r r e adable storage medium as recited in 
Claim 30, wherein said the hyperelliptic curve C is not of characteristic 2. 

32. (Currently Amended) The computer- reada b l e storage medium as recited in 
Claim 30, wherein 

for at least one element D of J(Q, a representative for iD will be A t - g(Po), where A t 
is effective of degree g. 

33. (Currently Amended) The compute r readable storage medium as recited in 
Claim 30, wherein if P=(x, y) is a point on said the hyperelliptic curve C, then -P denotes a 
point -P:=(x, -y), and wherein if a point P={x, y) occurs in A and y * 0, then -P := (x,-y) 
does not occur in A and a representative for identity will be g(Po). 

34. (Currently Amended) The compute r readable storage medium as recited in 
Claim 33, further comprising: 

to a representative A h associating two polynomials (a,, b,) which represent a divisor. 

35. (Currently Amended) The compute r readabl e storage medium as recited in 
Claim 33, further comprising: 

determining D as an m-torsion element of J(Q. 
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36. (Currently Amended) The compute r r e adable storage medium as recited in 
Claim 35, further comprising: 

if j is an integer, then hjj> = fyjAX) denoting a rational function on C with divisor 
(h JiD )=jA,-Aj-((j-l)g)(Po). 

37. (Currently Amended) The compute r readable storage medium as recited in 
Claim 35, wherein D is an m-torsion divisor and A m = g(Po), and a divisor oih m _ D is (h miD ) = 
mAi - mg(P 0 ). 

38 (Currently Amended) The compute r r e adabl e storage medium as recited in 
Claim 35, wherein h m j) is well-defined up to a multiplicative constant. 

39. (Currently Amended) The computer- r eada b le storage medium as recited in 
Claim 35, further comprising: 

evaluating h m> o at a degree zero divisor E on said the hyperelliptic curve C, wherein 
E does not contain P Q and E is prime to A f . 

40. (Currently Amended) The compute r readable storage medium as recited in 
Claim 35, wherein E is prime to A{ for all i in an addition-subtraction chain for m. 

41. (Currently Amended) The compute r readable storage medium as recited in 
Claim 39, wherein given A b A h and A i+ j, further comprising determining a function uq such 
that a divisor of Ujj is (w^) = A { + Aj - A i+j - g(Po). 
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42. (Currently Amended) The compute r - rcadab lc storage medium as recited in 
Claim 39, farther comprising: 

evaluating h jD (E) such that when j=\, h\fi is 1. 

43. (Currently Amended) The compute r - r e adabl e storage medium as recited in 
Claim 39, further comprising: 

given A h Aj, h^E) and h JiD (E), evaluating u u to be (Ujj)=Aj + Aj - A i+ j - g(Po\, and 
h i+j , D (E)= huffi htjffi utj (E). 

44. (Currently Amended) The compute r - read a M e storage medium as recited in 
Claim 30, further comprising: 

determining a function (uij) - A t + Aj - A i+ j - g(Po)- 

45. (Currently Amended) The computer- readable storage medium as recited in 
Claim 44, wherein g = 2 and 

(u^ = At + Aj - Ai+j - 2(P 0 ) is determined as follows 

greater than 2, otherwise, is determined as u,j (X) := d(x(X)\ wherein d{x) is the 
greatest common divisor of three polynomials (ai(x), ctj{x), bi{x)+bj(xj). 



Lee & Haves, pllc 

response to office action dated january 1 2, 2007 



12 of 20 



ATTORNEY DOCKET NO. MS1-1280US 
Serial No. 10/628,729 



46. (Currently Amended) The compute r readable storage medium as recited in 
Claim 30, further comprising: 

determining a Squared Tate pairing for a hyperelliptic curves v m , for an m-torsion 
element D of a Jacobian J(C) and an element E of J(C), with representatives 
(Pi)+(P 2 )+...+(P s ) - g(P 0 ) and (Qi)+(Q2)+...+(Q g ) ~ g(Po), respectively, with each P t and 
each Qj on the curve C, with Pi not equal to ±Qj for all i,j, determining that 

47. (Currently Amended) An apparatus comprising: 

memory configured to store information suitable for use with using a cryptographic 
process; and 

logic operatively coupled to said the memory and configured to determine a 
hyperelliptic curve C of genus g over a field K and a positive integer m, determine a 
Jacobian J(Q of said the hyperelliptic curve C, wherein each element D of J(Q contains a 
representative of the form A- g(Po) and A is an effective divisor of degree g, and determine 
a plurality of functions fy^ that are iterative building blocks for the formation of a function 
h miD in order to evaluate v m which is a Squared Tate pairing; 

a display device coupled to the logic for outputting validation of selected information; 

and 

the logic determining a course of action in response to the validation. 
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48. (Currently Amended) The apparatus as recited in Claim 47, wherein said the 
hyperelliptic curve C is not of characteristic 2. 

49. (Original) The apparatus as recited in Claim 47, wherein 

for at least one element D of J(Q, a representative for iD will be A t - g(Po), where A { 
is effective of degree g. 

50. (Currently Amended) The apparatus as recited in Claim 47, wherein if P=(x, 
y) is a point on said the hyperelliptic curve C, then -P denotes a point -P:=(x, -y), and 
wherein if a point P=(x, y) occurs in A and y * 0, then -P := (x-y) does not occur in A and a 
representative for identity will he g(Po). 

5 1 . (Currently Amended) The apparatus as recited in Claim 50, wherein said the 
logic is further configured to, for a representative Ah associate two polynomials {a it b,) 
which represent a divisor. 

52. (Currently Amended) The apparatus as recited in Claim 50, wherein saM die 
logic is further configured to determine D as an m-torsion element of J{C). 

53. (Currently Amended) The apparatus as recited in Claim 52, wherein said the 
logic is further configured to, if j is an integer, then determine hj_ D = h jiD {X) by denoting a 
rational function on C with divisor (h j D ) =jA\-Aj- ((/'- 1 ) g) (Po). 
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54. (Currently Amended) The computer - readabl e medium apparatus as recited in 
Claim 52, wherein D is an m-torsion divisor and A m ^ g(P 0 ), and a divisor of h mD is (h miD ) = 
mAi ~ fng(P 0 ). 

55 (Original) The apparatus as recited in Claim 52, wherein h m-D is well-defined 
up to a multiplicative constant. 

56. (Currently Amended) The apparatus as recited in Claim 52, wherein said the 
logic is further configured to evaluate h„ lrD at a degree zero divisor E on said die 
hyperelliptic curve C, wherein E does not contain P Q and E is prime to A u 

57. (Original) The apparatus as recited in Claim 52, wherein E is prime to A t for 
all / in an addition-subtraction chain for m. 

58. (Currently Amended) The apparatus as recited in Claim 56, wherein given A h 
Aj, and A i+J ; and wherein said the logic is further configured to determine a function uq such 
that a divisor of u u is (iiy) = A t + Aj - A i+J - g(P Q ). 

59. (Currently Amended) The apparatus as recited in Claim 56, wherein said the 
logic is further configured to evaluate h lD (E) such that when j=l, h hD is 1. 
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60. (Currently Amended) The apparatus as recited in Claim 56, wherein said the 
logic is further configured to, given A h Aj, h iiD (E) and hj, D (E), evaluate u tJ to be (uij)=Ai + Aj 
~ A i+J - g(Pol, and h i+lD (E)= h u dE) h lD {E) u {J (E). 

61. (Currently Amended) The apparatus as recited in Claim 47, wherein said the 
logic is further configured to determine a function (« v ) - A t + A } - A i+J - g(P 0 ). 

62. (Currently Amended) The apparatus as recited in Claim 61, wherein g = 2 

and 

(iiij) = Aj -I- Aj - A i+ j - 2{Pq) is determined by said file logic as follows 

greater than 2, otherwise, «y is determined as u u (X) := ^(x(Z)), wherein rf(x) is the 
greatest common divisor of three polynomials (a t {x), aj(x), bfa)+b/x)). 

63. (Currently Amended) The apparatus as recited in Claim 47, wherein saM the 
logic is further configured to determine a Squared Tate pairing for a hyperelliptic curves v m , 
for an m-torsion element D of a Jacobian J(Q and an element E of /(C), with representatives 
(i>i)+(P 2 )+...+(iy - #(P 0 ) and (gi)+(fiz)+...+(&) - g(P 0 ), respectively, with each P, and 
each Qf on the curve C, with P, not equal to ±Qj for all and to determine that 

v m (D,E):= (/u J ,(«)-W) + «)-(-^)+-+(^)-K)) ? . 
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